$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json) Hash identifier: lU5COow7wNM6BlyPxNxZZl8vd2BSHmVEJ9UCSZsU2qU= Subject key identifier: 66:FC:18:72:86:10:7E:E1:DE:48:C0:FD:8E:9C:DA:FF:52:49:F7:D2 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285849C0A4E742840A694F085CCDC0 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33139 IP address blocks: 66.49.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e7:42:84:0a:69:4f:08:5c:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=1cdacd1c-f3c9-4680-9bd2-1a100478ebec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:99:50:07:fd:5a:59:a4:7f:47:c9:3b:64:a0: 76:b1:72:0b:2d:c0:a1:e5:2c:f3:ca:49:18:20:6d: 62:4a:cc:f9:da:5e:f0:f5:15:77:7f:4d:76:d3:46: 6b:f4:e4:d0:d0:01:c2:1f:3c:e2:fd:37:0f:97:7b: 17:45:c8:10:2f:93:c2:b1:8f:4a:41:89:c8:11:38: cd:76:46:46:15:bb:51:c4:80:cb:91:ea:3a:df:23: 26:df:2f:ff:05:84:c1:88:76:af:71:3a:ca:d6:00: d1:b2:ef:22:ac:34:8b:e5:7f:01:24:72:25:0f:cb: 56:03:2b:eb:d5:0c:e0:b4:af:52:1b:a8:32:91:53: 04:f9:84:c5:fb:5a:d8:cc:8b:1d:85:77:a3:a2:c9: 41:8a:5e:3a:c6:01:9d:8e:df:95:b1:ff:92:22:a2: fa:e5:61:69:32:24:85:ac:ac:8c:05:43:f2:03:6b: e4:41:0b:3e:5b:ac:f6:d8:ff:09:82:48:c8:b4:3d: 26:67:5e:de:19:41:f4:cd:32:a7:f7:7c:ae:76:3a: f9:23:bc:4b:77:c9:90:82:68:9a:52:05:09:5b:70: cd:81:7d:69:ad:dc:f3:40:e7:32:f6:34:f5:9c:4e: 63:e0:bd:5b:8d:1d:04:5a:b9:c6:d1:8c:b8:d8:36: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FC:18:72:86:10:7E:E1:DE:48:C0:FD:8E:9C:DA:FF:52:49:F7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ce:1b:6b:a0:7c:9e:b9:11:02:8b:e5:05:66:2a:17:9c:c2: 1b:1e:28:f4:bd:97:df:f5:d4:a8:09:59:7a:3f:75:48:f9:f4: ec:b2:c1:7c:4c:d1:5c:50:19:c5:33:90:5a:bc:e5:f1:5f:e6: 71:fb:a5:14:2f:27:19:ec:b2:a6:68:d7:de:19:cb:e2:2f:f0: 7e:3f:e9:15:8a:e1:92:53:08:6d:ca:f6:40:9a:1f:0b:d6:17: ac:fa:06:5d:50:1b:ad:44:8f:3d:cd:b8:e8:fc:ec:db:e1:f5: 91:9b:fb:5e:89:57:56:30:f0:a6:77:7e:0d:52:66:7f:33:fb: f4:dc:cb:60:7b:d4:29:ac:a4:52:e9:0f:90:e8:02:56:66:5b: 1a:34:20:11:1a:73:01:4c:06:17:6c:b1:38:16:09:5e:9a:e8: 47:92:cf:bc:42:08:10:81:bc:07:37:fb:7e:ee:87:32:e8:3d: 03:c8:02:2b:97:df:f5:b4:6d:22:c9:41:de:44:80:f3:2a:ae: a0:b3:25:9e:dc:76:12:df:7d:3c:af:5f:97:3a:1c:3e:7a:9d: f4:05:2c:22:7e:ea:7a:2b:5c:cd:4b:cf:14:12:27:ff:5b:ac: b1:53:68:4f:8a:77:72:dd:17:7f:70:bc:6b:40:34:2e:91:37: 4f:d7:48:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOdChAppTwhczcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MWNkYWNkMWMtZjNjOS00NjgwLTliZDItMWExMDA0NzhlYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5lQB/1aWaR/R8k7ZKB2sXILLcCh5SzzykkY IG1iSsz52l7w9RV3f01200Zr9OTQ0AHCHzzi/TcPl3sXRcgQL5PCsY9KQYnIETjN dkZGFbtRxIDLkeo63yMm3y//BYTBiHavcTrK1gDRsu8irDSL5X8BJHIlD8tWAyvr 1QzgtK9SG6gykVME+YTF+1rYzIsdhXejoslBil46xgGdjt+Vsf+SIqL65WFpMiSF rKyMBUPyA2vkQQs+W6z22P8JgkjItD0mZ17eGUH0zTKn93yudjr5I7xLd8mQgmia UgUJW3DNgX1prdzzQOcy9jT1nE5j4L1bjR0EWrnG0Yy42DaI6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb8GHKGEH7h3kjA/Y6c2v9SSffSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvM2ExNjI4OGEtYzQ0MS0z MTNhLWE0MDAtMjRmOWQ1NDRjZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPOG2ugfJ65EQKL5QVmKhecwhseKPS9l9/11KgJWXo/dUj59OyywXxM 0VxQGcUzkFq85fFf5nH7pRQvJxnssqZo194Zy+Iv8H4/6RWK4ZJTCG3K9kCaHwvW F6z6Bl1QG61Ejz3NuOj87Nvh9ZGb+16JV1Yw8KZ3fg1SZn8z+/Tcy2B71CmspFLp D5DoAlZmWxo0IBEacwFMBhdssTgWCV6a6EeSz7xCCBCBvAc3+37uhzLoPQPIAiuX 3/W0bSLJQd5EgPMqrqCzJZ7cdhLffTyvX5c6HD56nfQFLCJ+6norXM1LzxQSJ/9b rLFTaE+Kd3LdF39wvGtANC6RN0/XSEY= -----END CERTIFICATE-----Generated at Sat May 10 21:18:27 2025 by rpki-client